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T he Convertor M 209 ♦ 

A ciphering and deciphering machine of the type "Haegelin", 
manufactured in SWEDEN* Worked by hand or by electricity. 
Essential parts: 

6 wheels , with 17, 19,21,23,25 and 26 pins, all of them 
corresponding to letters of the alphabet showing on the wheels. 

The pins can be set to be active or inactive, 

1 drum with 27 bars , bearing 1 or 2 lugs eaoh. These can 
be set to be aotive or inaotive. I f at least 1 lug is active, the 
bar can be made to protrude sideways from the drum. The lugs 
are set in rows corresponding to the wheels and so as to be 
touched by the active pins, when the drum is turned. 


1 printing wheel, with 2 sets of the letters of the 
alphabet, arranged in alphabetic but opposite order, one for 
clear writing, the other for cipher writing: 

Clear: ABCDEFGHIJKLMNOP'QRSTUVWXYZ 
Ciph; ZYXWVUTSRQPONMLKJ IHGFEDCBA 

When ^ciphering, the clear letter wanted is -pra-n-ted first. 
Then the wheels a re turned by one pin position eaoh, and the drum 
is turned once round. This makes the aotive pins work on the lugs 
set before them - if there are any «• and so pull sideways a 
number of bars. At the same time, 6 ^ 0 3e bar work on teeth 
fixed to the printing wheel, turning that wheel round by so many 
letters as there are bars protruding from the drum. This turn 
can oover from 0 to 25 letter-spaces on the printing wheel. 

26 bars protruding equal 0 bar, 27 bars equal 1 bar in effeot. 
Then only the cipher letter is printed* 


When deciphering ^ the cipher letter is printed first and 
the movements as above result in a turn of the printing wheel 
that will print the corresponding clear letter. 


The converter supplies a substitution-cipher , with 
alphabets changing from lettax- to .tetter, ac cording to the 
turns of the printing wheel between clear and cipher. There 
are but 26 substitution alphabets, but the order of their 
following one another depends on the setting of the pins and 
lugs , and that can be varied praotically without limits. With 
a given setting of pins and lugs, the order of substitution 
alphabets will be repeated after 17 x 19 x 21 x 23 x 25 x 26 » 
about 105 million. - letters printed. 


The Ciphering System. 

The U.S.A. u sed the converter for messages of minor importance 
between units of various signal nets. For every net, key lists 
were issued, giving the setting of pins and lugs - internal 
indicator - for one month, or for periods fixed as "D-Day'', 

"Dr-clay TV, "D-day + 2" etc. The setting changed from day to 

day. 


The system was used in AFRICA, SICILY and ITALY, as 
won rh in 'FRANCE and on the Western front. 
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Messages were sent in 5- loiter groups* The first and the 
last two groups of every rasg. - external indioajtor - were 
identioal* Of these, the first two letters ,, always identical, 
were the key for changing the wheels from the initial position 
to starting position* The next 6 letters were the initial 
position of the wheels* The last two letters indicated the 
signal net and the key list used for the internal setting* 

When ciphering , the pins and lugs had to be set according 
to key list and date - internal setting the wheels were turned 
to any chance position - external setting - and the letters then 
showing on the wheels were used for the 3rd to 8th letter of 
the external indicator of the message to be sent* Then any letter 
of the alphabet was printed several times, this clear letter being 
used as the first 2 letters of the external indicator. The first 
letters of the oipher text produced by this printing^, were then 
turned on on the wheels. As only one of the wheels bears all the 
letters of the alphabet, usually more than 6 letters had to be 
printed to provide letters suitable for all the wheels. After 
that, the ciphering could begin. Words were spaced by printing 
clear **Z". 

When deciphering , the pins and lugs had to be set as 
above* The wheels" were turned to the initial position given by 
the 3rd to 8th letter of the external indicator. The letter 1st 
and 2nd of the indicator was printed several times. The wheels 
were turned to the letters resulting of this printing and the 
deciphering of the message could begin. Cipher letters 
corresponding to clear "z" left the word-to-word spaces in the 
clear text. 

The Breaking of the Cipher 


The Cipher can be broken in four cases only: 

1* When there are two different messages available, ciphered 

by one signal net, on the same day, and with an identical starting 
i position of all wheels - same external indicator - so that 
internal and external set ting s are identical. 

This may be subsequent messages of one station, or a message 
and the answer thereon, the operator of the 2nd message or 
the answer turning back the converter to the starting 
position of the 1st message and negleoting to change the 
external setting, for the 2nd message or the answer* 

2* When there are two identical messages available, ciphered 
by one signal net, on the same day, and with an identical 
starting position of If or 5 wheels only, but with the 
same external indicator, so that internal settings are 
identioal and external settings differ slightly* 

This results by an error in the setting of the wheels 
to starting position, the typing of the single letter 
producing e.g. RSQTKFJ and the operator turning the 
wheels to RSORTVJ, in the 1st message. The 2nd message is 
correot repetition of the 1st, with identical 
external indicator* 
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3* When there are two identical messages available, 
ciphered by one signal net, on the same day, and 
with an identical initial position of the wheels, 
but with a storting position deplaced by one or 
two letters (or pins) equally on all wheels. 

This results by printing another Single letter, than 
the two first letters of the external indicator, for 
changing the initial wheel position to the starting, 
position, in the 1st message. The 2nd message is a 
correct repetition of the 1st, with identical 
external indicator. If the correct single letter 
differs from that used for ciphering message I, by 
one letter of the alphabet (e.g. M and N), the 
storting position of both messages will also differ 
by one letter - or pin position on all wheels. Same 
for two ( and more) letters, so long as no letters 
are printed, that could not be turned on on the 
respective wheel. 

4* When an original key-list is captured. 

Identical internal and external settings. 

For the following the cipher texts of the two messages 
be supposed as: 

Message I: Z C L N H • . • . » 

Message II; N H I 0 0 ..... 

Both first letters Were printed with the identical 
converter settings and with the same turn of the printing 
wheel from clear to cipher. Thus, assuming certain clear 
letters for the 1st olpher letter in Message I, it can be 
told what the first clear letter in Message II must be. 

The apparatus for this is a working model of the 
printing wheel, two tapes with alphabets written in 
opposite direction: 


MNOPQRST UVWXY Z 


YXWVUTSRQPO 


If in message I clear A stands for cipher Z, the tapes 
arranged so that A and Z correspond, show thdt .3£. field M 

correspond, and that in-message II clear M stands for cipher If* 

* 

Assuming all the alphabet in turn, that would show as 
the 1st clear letters; 


Message. I: ABCDEPGHIJKLMNOPQRSTUVWXYZ 

Message H j MNOPQRST UVWXY ZABCDBFGH IJKL 
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If cipher C is clear A, then cipher H is clear V. 
If L is A, then I is D. If N is A, then 0 is Z. If H is A, 
then 0 is T« That would show the first five clear letters 
to be; 


Message I; 

Message II: 


(1st to 5th letter): 
f 1 st letter) : 

1 2nd " S ; 

(3rd " St 

(4th " ) ; 

(5th " ): 


ABCDEFGHIJKLMNO 

M N OPQRST U V W X Y Z A 
VWXYZABCDEFGHIJ 
DEFGHIJKLMNGPQR 
ZABC DE FGHIJKLMN 
TUVWXYZABCDEFG. 




If for any part of Message I the oorreot clear text oan be 
guessed, the corresponding part of Message II shows clear text 
also, though the text is different from, that in Message I, 
Assuming in the example above, the first word in Message I to 
be rt ONE " , the first word in Message n muht be "Affi", so "ONE" 
at this place is wrong# 


It is necessary to try 'mots probables " Until the correct 
word is found. For that , the table as above is cut in vertical 
stripes, and words are set with the letters of Message I in 
ascending order, so that the corresponding text of Message II may 
be read hori z ontally , Example for a break; 



0 

N 

Z 

E 

Q 

z 

z 

L 

U 

c 

jZ 

A 

I 

H 

Y 

L 

J 

Q 

Dj 

S 

U 

R 

M 

X 

z 

1 c 

N 

G 

K 

L 

i Y 

H 

S 

P 

G 

is 

Ii 

X 

Z 

0, 


The 5th to 9th letter in Message I spell "-ONE-" in 
Message II; "SIX-0", possibly "SIX-ONE-”. 


The break is extended to both sides, either by continuing 
work with the vertical stripes, or by using the model of the 
printing wheel only. A break of 60 to fOO clear letters is 
sufficient for further work. 


Examples for "mots probables"; 

Numbers, signs ( dash, paren,craa, etc), short words (at, 
in,to,eto), endings (-ing,ation,eto. ). 

> 

With all the above, one can read the original two messages 
only, as far as broken. Before deciphering or reproducing the 
ciphering of these messages on the converter, the internal 
setting of the latter has to be found. 
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Idraaitioal internal and slightly different external settings* 



The cipher texts of the two messages are partly identical# 
partly different. Were they differ, there is at least one pin 
position wrong. Prom the spaoe from correct letter (Message II ) 
to wrong letter (Message i) it is possible to deduce the action 
of the wheel that was in the wrong starting position* 

Details are unknown to me. Messages with three or more 
wheels set in a wrong starting position cannot be broken* 


Deplaced starting position. . 

If the starting positions of the wheels for two messages 
ciphered otherwise under identical conditions, are displaced by 
one (letter or pin) equally on every wheel, the sequel of turns 
of the printing wheel is in both messages identical, but 
displaced by one ( letter-space ) . By writing the messages displaced 
by one letter, the cipher letters resulting from the same turns 
of the printing wheel are above one another: E.g* 


Message I j 
Message II : 


W G Q B P 
P S I P P J 


Supposing W(Message I) is A, then S (Message ll) is E, 
as the model of the printing wheel shows. S is 2nd letter of 
the text, so cipher G (Message i) must be clear E too. 


If G is E, then I is 0. That is the 3rd letter of the 
text, so Q (Message i) must be C too. If this, is so, P is D, 
and B as 4th letter is the Same. If B is D, then the p 
underneath is P, etc. So if the initial W is clear 4 A, the clear 
text of the messages should read; 

A E C D P 


which is wrong. By assuming all letters of the alphabet in 
turn, for the first cipher letter, however, the correct clear* 
text must be found; 


A E C D P V . . . 
B P D E Q W . . . 
C G E F R X . . , 
D H F G S Y . . . 
E I G H T Z . . . 


The messages begin both "EIGHT" and this can be extended 
easily, by the same method. 


* _ 

If two messages are displaced by two or more positions, 

they must be written down displaced accordingly, and then worked 
on as messages with identical internal and external indicators. 


Finding The Relative Internal Setting* 

This consists in setting, on every wheel, the pins in the 
correct sequel of active or inactive positions, but without 
beginning the sequel at the correct spot of the circumference of 
the wheel. E.g. 
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Letters on the wheel; ABCDEPGHIJK . . . 

Absolute oorreot sequence ;+ + *. + -- - + - + + , , , 

Relative correot sequence* 

(displaced by two): - + + + - + + -. . « 

There is but one way of setting the lugs on the drum bars# 

This, and the setting of the pins, makes the internal setting of 
the converter# 

The clear text of a broken message and the cipher text 
of the same, are written one under the other, to show over how 
many letter-spaces the printing wheel turned before printing 
every cipher letter. Ab Z and A are, on the printing wheel, 
side by side, clear A would result in cipher Z by the space 0, 
in cipher A by the space 1 , in cipher B by the space 2, etc. 

Clear B would feault in cypher T by the space 0, in cypher Z 
by the space 1, in cypher A by the space 2, eto. E.g# 

Clear* R E Z Y 0 U R 

Cipher* E V F D C P 3 

■ Spaces* 23 5 17 10 

0 2 10 

This gives a sequel of spaoes in the length of the 
broken message# 

The sequel is written in six tables^ with 17,19.® 

21,23,25 and 26 numbers respectively, written in one line# 

Every table indicates the wheel corresponding to the breadth of 
the case# E.g. 

Wheel 17* 23 0 5 2 1 7 10 1 0 21 8 20 11 15 7 1 2 25 0 5 

25 6 2 3 22 8 9 20 2 25 5 25 3 17 21 9 6 

20 9 8 0 25 4 4 

The spaces showing in one column (one under the other) 
have been produced with the wheel being in a certain position, 
identical for all the spaces in that coltim. Prom the spaces 
in a column being large or small, it can be said whether 
the pin in that position of the wheel must have been active 
or inactive. Active ■ pins have contributed to make the space 
large. Small spaces in one column show that the wheel must have 
been inactive in that position. The sequel of pin positions for 
the wheel above would be* 

By comparing the different wheels, sequels of pin 
positions, though incomplete, can be made up for most of the 
wheels. 


By continued comparing and correcting the sequels, 
they can be made complete. By comparing them with the turns 
made by the printing wheel to produce every cipher letter, 
moreover, the working of the drum bars, and the positions of 
the lugs on them, can be deduced# 
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The result is th© oonplet©, though rel&tive ? internal 
setting of the ooxivorter- Before deoaphei’ing of other messages 
mith the converter is possible, though these messages be 
ciphered with the same internal settings, the absolute internal 
setting has to be fb und. 

The Absolu te Internal 

^ i i i i ju g, | | „„ | , 

As has been said before, the position of the active and 
inactive pins on every wheel, relative to the letters on the 
wheel, must be found* The sequel of the pin positions of 

every wheel is known, and so are the positions of the drum bar 
lugs* 

The sequel of spaces covered by the turns of the 
printing wheel, from the beginning of the message text, is 
known* It is found by comparing the clear and the cipher text 
of the message and using the model of the printing wheel# E«g* 

Clear: R E Z Y 0 URZMSG $ * . 

Cipher* EM APOTSSCBW. . . 

Spaces; 22 17 0 14 3 14 10 1 8 1 5 20 3 . . . 

Every space is the result from 1 tb 5 possible combinations 
of active or inactive pin positions on the 6 wheels. When the 


sequel of spaces 
can be nade out. 

is long 

HU g* 

(1) 

enough. 

oeartain Sequels 

of pin positions 

Wheel I: 

+ 

4 


+ 

- 

- 

- 

4 

> 

4 

4 

etc* 

" II: 

4 

■ 


4 

4 

4 

+ 

i 

4 


- 

etc. 

" III: 



+ 

4 

— 

- 

4 

4 

- 

- 

eto* 

" Wi 

- 

4 

- 

+ 

- 

4 

4 

4 


- 

eto* 

" Vs 


- 

*- 

+ 

+ 

4 

- 

- 

- 

4 

etc* 

" vi: 

+ 

+ 

- 

4 

— 

- 

4 

4 

4 

4 

etc* 


The vertical columns of this table correspond to the 1st, 2nd* 
3rd, etc. letter of the message text* The column. (&) as corresponding 
to the first, indicates the pin positions at the letters on every 
wheel, that move,, iphen the message text begins to be printed* These 
are the letters rei erred to as starting position of the wheels# 

The idea about the absolute internal setting, is to begin 
the arrangement or sequel of pin positions (column 'A) at suoh 
letters of the wheels, that when the wheels are turned to initial 
positions - external indicator — and the single letter of the 
alphabet is printed, the 1st printing of this letter will give 
as cipher the letter, where ora wheel I the sequel of pin positions 
begins ; the 2nd printing of the single will give as cipher the 
letter, where on wheel IX the sequel of pin positions begins, 
eto* 



E.g* External indicator: EFC0H HDEQR. 
The wheels are turned to the positions 

Wheel I: C 
" II: 0 
" III: H 
IV: B 
Vi D 
VI: E 


n 

(4 
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I 

i 

f 
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and the letter F is printed repeatedly, with reaults as follows: 


1st printing; 

2nd printing; 
3rd printing: 
l+th printing: 
5th printing: 
6th printing: 


Clear F, o by 1st 
cipher 9 (wheel 
Clear F, by 2nd 
Clear F, by 3rd 
Clear F> by 4th 
Clear F, by 5th 
Clear F, by 6th 


space of the printing 

I) 

space., gives cipher <5 
space, gives cipher o 
spa«e, gives oipher o 
spade, gives cipher o 
space, gives cipher 0 


wheel, 

(wheel 
(wheel 
wheel 
wheel 
wheel 




The six spaces or turns of the printing wheel can be drawn 
as a table, e.g. 


Spaces 

• 

Ifr 

1 

2 

3 

4 

5 

6 

’Wheel 

I: 

+ 

+ 

- 

- 

+ 


Wheel 

II: 


- 


- 


- 

Wheel 

III: 

** 

- 

+ 

+ 

- 

- 

Wheel 

IV: 

+ 


+ 

+ 


- 

Wheel 

V: 

— 

+ 


- 

- 

+ 

Wheel 

VI: 

- 

- 

- 

+ 


+ 


If the table is right, the columns (vertical) must be 
possible combinations of pin positions, but also the lines must 
be possible s 3que la of pin positions on the respective wheels, 
and the letters resulting by the printing of clear F and the 
space in question must be such as exist on the respective wheel; 


This must be tried and varied so long as to get a table 
responding to this conditions. 

When the table is found, the cipher letters resulting by 
the printing of ’’FFPFFF »»•" and the spaces shown in the table, 
give the starting position of the wheels. At these, the sequels 
of pin positions have to begin (y on page Ep)« 

If the absolute internal setting cannot be found this 
way - as often it cannot - a third message with the same internal 
setting (of the same day and signal net) has to be broken first. 

Breaking A Third Message, 

The relative internal settings of this message are known 
by having broken two messages of the same day and signal net, 
and fixed their relative internal settings. This message, 
howeVer, cannot be deciphered on the converter (as no message 
other than the two broken messages can) before tho absolute 
internal settings are found out. 

The relative internal setting being give*, it can be said, 
for every turn of the printing wheel, which of the 6 wheels took 
by means of pins an active, or an inaotlve, part at it. So a 
list of turns, or spaces, is made up. E*g» 


Space: 

0 

1 

2 

3 

k i 

etc. 

Wheel I 

- 

- 


+ 

- 


- 1 


Wheel II 



- 

+ 

+ 

+ 



Wheel III 

- 

-f 

1 “ 

+ 


- 

+ 

etc. 

Wheel IV 

** 


- 


- 

- 

- 


Wheel V 

- 


- 


- 




Wheel VI 


+ 




w 

* 
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There are, for every letter printed, 2^ = 64 possible 
arrangements of + or - pin positions on the 6 wheels. So 
several of the 25 possible spaces produced by the printing 
wheel, can be produced by more than one arrangement. 

The sequel of + and - pin positions on every wheel 
is also knc.jn, 

A "mot probable” is now tried at the beginning of 
the message. The spaoes that must have been nade, if the 
supposition is correct, are derived from the giyen cipher, and 
the possible clear, text* A table with the possible spaces and 
pin positions is drawn accordingly. E»g» 


Cipher text? 

J 

E 

M 

Q 

E 

H 

G 

Clear 

text: 

z 

E 

I 

G 

H 

T 

Z 

Spaces s 

9 

9 

21 

25 

12 

1 

6 

Wheel 

I 

4- 

4 

4 

4 

- 

4 

- 

ft 

II 

4- 

4 

4 

4 


- 

- 

ft 

HI 


- 

+ 

4 


- 

4 

ft 

IV 

- 


- 

4 

- 

- 

- 

It 

V 

+ 

+ 

- 

4 

+ 

4 

- 

ft 

VI 

- 

— 

+ 



- 



When more than one pin position arrangement is possible - 
for a space, so many tables have to be drawn, as are possible* 

Then the horizontal lines are compared with the sequels of 
pin positions for every wheel. If they are possible, i.a* 
if they are sections of these sequels, the table is correct, and 
the supposed word really stands in this part of the clear text. 

The sequels of pin positions are then completed sideways 
(or to both sides) through the whole of the message, prom the 
vertical oolumns the spaces are derived. The cypher letters 
and the spaces belonging to them give the clear letters. The 
message can be read throughout* 

If the horizontal lines in the table are not part of the 
sequels of pin positions on the wheels, the table Ts wrong and 
the supposed word is not there. Then the "mot probable" has 
to be tried in the same way right through the message. 

If one "mot probable " has been t r led throughout without 
success., others have to be tried, until the t^ble of + and - is 
oonre«t, 

r 

With a third broken message at hand, the method of finding 
tfce absolute internal setting of the day and signal net, is the 
same, as described above. Work, however, is greatly reduced in 
length, by combination of the conditions set to the table to b© 
drawn, from the first two, and the third, message. Many possible 
eases can be eliminated quickly and the overlooking of the 
correct table is not so easy, as when working on two messages 
only* 

With the absolute internal setting found, and used on the 
converter, all available messages of the day and a ignA- net, 
can be deciphered* 
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Deciphering With The Converter. 


Messages that had a good transmission and reoeption, i.e. where 
the cipher text at hand is correct _ are deciphered without difficulty* 
as explained above (page 3). Frequent difficulties are: 

1) Ciphering mistakes. They have been dealt with above. 

% 

2) Transmission mistakes: Letters or groups of letters have 

been left out or inserted^ or both. To deoipher such 
messages, letters or groups of letters have to be inserted or 
left out. 

3) Reoeption mistakes. The operator did not get the corrsot 

Morse letters. Frequent mistakes are e.g. 

B - D, S - I, G - M, H - I, S - H, U - V, Z - G, 

Capture <3. Key Lists, 

During tornpor&ry U,5. retreats In NORTH AFRICA, and 
HALT, some times original oonyehters and koy— 1 lata ir«p« eaxitured. 
Containing the original internal settings for one net and one month, 
they served to decipher all messages available of this signal 
net and this period* 

One key-list used on iwDajr and a few days afterwards, was 
captured after the invasion in FRANCE had begun. 

In every case, the period covered by key-lists captured 
was over, when they oame in German possession* So it was never 
possible to read current signalling with them, even if the keys 
were not altered, when the loss of the key-lists was ascertained, 
as was to be expected. 

Working Results . 

Messages were broken in a time ranging from 2 hours to 
4 weeks. Many of them were not broken at all, owing to the 
difficulty of guessing a word of the clear text, or to too 

many transmission, or reception, mistakes, 

* 

The finding of the relative internal settings "frock about 1 
day,, that of the absolute internal settings from 1 day to 4 weeks* 

The breaking of a third message also often took 2 to 4 weeks* 

With an absolute internal setting found, from 2 to 50 
messages of the same day and signal net were deciphered, 

* 

From the massages come in, about 10 percent went 
deciphered*. 

What Messages Were About* 

The following groups of messages and samples of clear 
text can be remembered: 

Supplies: Laundry open at once near oross-road 832045* 

Secure large envelope from under Novaks jeep seat. 

Send ten tonner for ammo* to •*•••• 
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Tactical: C.P. fit! 83071 

Headache red advancing N.E* , no resistance. 

Re chi court occupied at 1400 hours., 744018. 

Air Support: Bomb line bridge 273406, then railway to ... 

Your demand accepted. Aspo. 



GRAZ bombed by instruments. 

Personal: 

Send pass for Sgt. White to go to PARIS to-morrow, 

Lt, Blade is to report to this HQ to be promoted. 
Report 2 o, , 4noo. , 290 em. 

Signalling: 

Traffic report, out 10 secret, 20 confidential, 

130 ordinary messages, in 12 secret, 16 confidential 
125 ordinary messages. 


Names and numbers of units were given, but cannot be 
remembered, except such as HEADACHE FOOTBALL, EGG-CTJP etc. 

Names of officers cannot be remembered, except Ma j or 
Longino, aspo, from the PRANCE front* 



